Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File:                     S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier:          y6PeB/LDwz9yyVIVnd942WEjdEvNrfNC2TjduzosSqA=
Subject key identifier:   4F:77:7C:3F:7F:DD:A8:17:8F:DE:86:E4:E8:24:A1:20:40:DB:6E:C9
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer:       /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number:          089B
Signing time:             Fri 12 Jun 2026 20:36:13 +0000
Manifest this update:     Fri 12 Jun 2026 20:36:12 +0000
Manifest next update:     Fri 19 Jun 2026 20:36:12 +0000
Files and hashes:         1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: LrIPiYgZ1pZTMRcV5sFtdTFvygUsKl94naPc0+p1B84=)
                          2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
                          3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
        Validity
            Not Before: Jun 12 20:36:12 2026 GMT
            Not After : Jun 19 20:36:12 2026 GMT
        Subject: CN=6a2c6dbc-c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:a7:72:c4:86:a0:93:94:f5:14:70:d6:d4:
                    ab:48:d5:64:2e:27:8b:ce:4a:52:80:a8:99:0f:5a:
                    ac:8d:54:16:73:49:d0:23:9d:66:c6:ae:8d:ef:d9:
                    db:33:ca:f0:76:41:26:e6:44:d6:e6:cb:d4:2a:3f:
                    e0:18:d5:8e:2b:d4:8a:d8:08:dd:08:a9:80:a0:e8:
                    18:87:cb:a8:16:e2:29:f8:a5:b7:86:22:42:57:cf:
                    b0:c9:5f:47:43:09:7f:db:d5:5d:0d:36:8f:dd:ce:
                    27:67:02:f1:1b:3e:94:cb:ab:68:8d:0c:82:17:bb:
                    60:7d:70:88:fe:3d:43:52:06:6f:5c:40:6d:b1:a9:
                    16:2a:6e:ca:a7:ed:d5:4c:0c:45:67:86:d0:73:24:
                    5c:fd:96:e3:57:fd:b8:e3:aa:43:f5:ec:56:87:d5:
                    8b:49:45:e4:43:13:a2:c9:53:e1:92:65:bd:ec:96:
                    5f:9f:39:ed:a4:c1:dd:07:06:6e:cb:6e:09:2e:01:
                    7b:ff:5d:9c:e8:13:50:43:fe:e7:a0:af:da:42:8d:
                    ac:05:67:ef:1c:03:b5:8c:ce:0b:a8:12:0e:8d:74:
                    a4:3b:67:a0:0e:9a:0d:f3:90:62:c6:e8:16:82:80:
                    35:b4:ec:58:72:df:50:99:c7:82:8f:30:95:f0:37:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:7C:3F:7F:DD:A8:17:8F:DE:86:E4:E8:24:A1:20:40:DB:6E:C9
            X509v3 Authority Key Identifier:
                keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7f:0b:8f:2d:8c:a2:74:2a:5c:2b:61:59:9c:5c:a6:5c:08:
         71:09:a3:3d:70:17:89:03:99:59:d4:9e:7e:94:3d:92:d3:9c:
         77:26:dd:ad:ef:85:f6:6a:19:67:31:dc:67:f4:f2:53:fd:01:
         60:c6:20:da:32:2a:88:59:77:3f:00:1e:d4:cb:85:15:4c:0b:
         ca:cb:8f:3f:c0:84:28:f8:01:cc:b4:05:fc:6e:e9:4d:da:98:
         01:5a:d1:94:3c:21:27:ae:72:d0:b2:12:76:8b:1a:e5:47:62:
         19:5f:44:55:30:d2:bf:6b:29:60:44:2a:ab:e9:74:3d:fe:6a:
         2a:72:79:ee:4e:ab:fd:98:41:0e:cc:30:05:4d:9a:cb:87:66:
         a9:16:e8:1d:0c:32:ce:4c:83:77:b4:20:9f:40:ed:4d:0e:99:
         da:e8:34:6b:3b:c6:47:e5:51:61:59:6b:69:35:3c:9c:d1:4b:
         ab:44:de:a2:a1:ba:dc:9a:98:2f:39:d8:08:fe:2b:c5:2d:43:
         99:f5:8a:48:82:0b:d7:30:a1:8d:75:55:ee:4c:93:45:e2:04:
         f2:d3:05:1e:b0:96:94:f9:cc:65:52:14:a2:22:19:b7:ea:8a:
         b4:e7:92:77:6f:de:23:24:bd:eb:cd:c0:91:29:4d:87:b7:b9:
         88:9e:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:37 2026 by rpki-client